CVE-2022-40295CWE-916

Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

published October 31, 2022

CVSS
—
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.8th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2022-10-31T20:08Z
EPSS history
Timeline
  • 31 OCT 20:08Z
    Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
    cvelistv5